IN THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (Currently Amended) A method performed by a user terminal of a wireless 
access network, the method comprising: 

generating a shared secret to be provided to an access point of the wireless access 
network; 

encrypting the shared secret with an access point public key; 

g e n e rating an auth e nticator string, th e auth e nticator string including a portion of 
th e shar e d s e cr e t encrypt e d with a us e r t e rminal privat e k e y ; 

pre-calculating a plurality of authenticator messages based on a 
corresponding plurality of estimated time parameters, each authenticator message 
comprising at least part of the shared secret; 

receiving an indication of an actual time parameter; and 

selecting a pre-calculated authenticator message that corresponds to the 
actual time parameter; and 

signing the selected authenticator message with a user terminal private key; 

and 

sending a message to the access point, the message including the encrypted shared 
secret, a user terminal certificate, and the signed authenticator message string . 

2. (Original) The method of claim 1, wherein the user terminal certificate is 
scrambled, using a pseudo-random sequence generator initialized with a part of the 
shared secret, before being included in the message. 

3. (Original) The method of claim 2, wherein the remainder of the shared secret 
comprises a master secret to be used for symmetric key cryptography between the user 
terminal and the access point. 

4. (Cancelled) 
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5. (Currently Amended) The method of claim [[4]] 1, wherein signing the 
authenticator message comprises: 

generating a digest of the authenticator message; and 

encrypting the authenticator message digest with the user terminal private key. 
6-7. (Cancelled) 

8. (Currently Amended) The method of claim [[7]] 1, wherein the time parameter 
comprises an absolute frame number. 

9. (Previously Presented) The method of claim 1, wherein the user terminal 
generates and encrypts the shared secret prior to identifying the access point by 
encrypting the shared secret with the public keys of a plurality of access points stored in 
the user terminal. 

10-16. (Cancelled) 

1 7. (Currently Amended) A user terminal comprising: 

a memory to store a user terminal certificate and a shared secret to be provided to 
an access point; 

a processor coupled to the memory to 

encrypt the shared secret with access point public key, and to 
g e n e rat e an authenticator string including a portion of th e shared s e cr e t 
e ncrypt e d with a us e r t e rminal privat e k e y; 
pre-calculate a plurality of authenticator messages based on a 

corresponding plurality of estimated time parameters, each authenticator 

message comprising at least part of the shared secret; 

receive an indication of an actual time parameter, 

select a pre-calculated authenticator message that corresponds to the 

actual time parameter, and 
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sign the selected authenticator message with a user terminal private 
key; and 

a transmitter coupled to the processor to send a message to the access point, the 
message including the encrypted shared secret, the user terminal certificate, and the 
signed authenticator string-message. 

18. (Original) The user terminal of claim 1 7, wherein the processor is further to 
scramble the user terminal certificate using a pseudo-random sequence generator 
initialized with a part of the shared secret, before being included in the message. 

19. (Original) The user terminal of claim 18, wherein the remainder of the shared 
secret comprises a master secret to be used for symmetric key cryptography between the 
user terminal and the access point. 

20. (Cancelled). 

21 . (Currently Amended) The user terminal of claim [[20]] 17, wherein signing the 
authenticator message comprises: 

generating a digest of the authenticator message; and 

encrypting the authenticator message digest with the user terminal private key. 
22-23. (Cancelled) 

24. (Currently Amended) The user terminal of claim [[23]] 17, wherein the time 
parameter comprises an absolute frame number. 

25-32. (Cancelled) 
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33. (Currently Amended) A machine-readable medium storing data representing 
instructions that, when executed by a processor of a user terminal, cause the processor to 
perform operations comprising: 

generating a shared secret to be provided to an access point of the wireless access 
network; 

encrypting the shared secret with an access point public key; 

generating an auth e nticator string, th e auth e nticator string including a portion of 
th e shared s e cret e ncrypted with a us e r t e rminal private key ; 

pre-calculating a plurality of authenticator messages based on a 
corresponding plurality of estimated time parameters, each authenticator message 
comprising at least part of the shared secret; 

receiving an indication of an actual time parameter; and 

selecting a pre-calculated authenticator message that corresponds to the 
actual time parameter; and 

signing the selected authenticator message with a user terminal private key; 

and 

sending a message to the access point, the message including the encrypted shared 
secret, a user terminal certificate, and the signed authenticator message string . 

34. (Original) The machine-readable medium of claim 33, wherein the user terminal 
certificate is scrambled, using a pseudo-random sequence generator initialized with a part 
of the shared secret, before being included in the message. 

35. (Original) The machine-readable medium of claim 34, wherein the remainder of 
the shared secret comprises a master secret to be used for symmetric key cryptography 
between the user terminal and the access point. 

36. (Cancelled). 
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37. (Original) The machine-readable medium of claim 36, wherein signing the 
authenticator message comprises: 

generating a digest of the authenticator message; and 

encrypting the authenticator message digest with the user terminal private key. 
38-39. (Cancelled) 

40. (Previously Presented) The machine-readable medium of claim 39, wherein the 
time parameter comprises an absolute frame number. 

41-49. (Cancelled) 
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